CVE-2015-7006
Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive.
Date published : 2015-10-23
http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html
http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html
